ZDI-26-189 HIGH 8.2 Published Mar 16, 2026

VMware ESXi VMXNET3 Integer Overflow Local Privilege Escalation Vulnerability

VMware

VMware ESXi contains a privilege escalation vulnerability (CVE-2025-41236) with a CVSS score of 8.2 that allows attackers with high-privileged code execution on guest systems to escalate their privileges further on the host. Organizations running VMware ESXi should prioritize patching this vulnerability and review access controls to restrict which users can execute high-privileged code on guest systems. Security teams should monitor for any suspicious privilege escalation attempts and apply vendor patches as soon as they become available.

Related CVE

CVE-2025-41236

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy